Every UniFi deployment schools project in Texas must address security requirements under Texas Education Code Chapter 37 and the Texas School Safety Center (TxSSC) standards, while simultaneously delivering enterprise Wi-Fi for 1:1 student device programs and CIPA-compliant network filtering. 2M Technology designs and installs complete UniFi systems for Texas school districts — from single elementary campuses to multi-building high school complexes. This guide covers the school-specific design decisions for UniFi deployment in K-12 schools that make the difference between a compliant system and a liability.

Texas law establishes the compliance baseline for UniFi deployment schools — TxSSC guidance, SB 11 single-point entry, and Texas Education Code 37.108 security audits all shape what infrastructure is required.

Texas Education Code 37.108 and TxSSC guidance define the minimum compliance requirements for every UniFi deployment schools security project in the state.

1. Texas School Security Requirements

Successful K-12 campus security infrastructure in Texas begins with understanding the overlapping compliance requirements. Texas school security infrastructure is governed by several overlapping requirements. Key provisions relevant to camera and access control deployments:

• Texas Education Code §37.108: Requires school districts to adopt a multi-hazard emergency operations plan and conduct security audits. Surveillance systems must cover all exterior entrances, hallways, and parking areas.
• TxSSC Guidance: The Texas School Safety Center recommends single-point-of-entry with controlled access, visitor management systems, and camera coverage of all building entry points.
• SB 11 (2019): Required school districts to implement access control systems at all exterior entry points by September 2020. Most Texas districts now have some form of access control — many are upgrading to integrated systems.
• Visitor management: Most Texas districts use visitor management software (Raptor Technologies is common) — UniFi Access can integrate with visitor management workflows through credential provisioning.

Camera placement in UniFi deployment schools must distinguish between permissible areas (corridors, lobbies, parking, cafeteria) and legally prohibited zones (restrooms, locker rooms, changing areas).

2. Campus Camera Coverage

Camera-free zones: Restrooms, locker rooms, and changing areas are prohibited by federal and Texas state law. Cameras facing into these areas from adjacent corridors must be positioned to avoid capturing the protected space interior. Verify all exterior door camera angles before installation.

Student Wi-Fi in any UniFi deployment schools project requires CIPA-compliant content filtering on the student SSID — UniFi handles the VLAN segmentation; a dedicated filtering platform handles the content layer.

3. Student & Staff Wi-Fi Design

School Wi-Fi in 1:1 device environments (one Chromebook or iPad per student) creates high client density — a classroom of 30 students generates 30–45 Wi-Fi clients (including teacher device, overhead display, and classroom IoT). Design considerations:

• One AP per classroom for 1:1 programs: Do not attempt to cover 2–3 classrooms with one AP in a 1:1 environment. Concrete and masonry block walls between classrooms attenuate Wi-Fi by 10–15 dB — each classroom needs its own AP mounted inside or directly outside the room.
• UniFi U6 Pro or U6 Enterprise per classroom: At 30 clients per classroom, Wi-Fi 6 (OFDMA) significantly outperforms Wi-Fi 5 — U6 Pro handles classroom densities efficiently on PoE+ (13W).
• Content filtering (CIPA compliance): CIPA requires schools receiving E-Rate funding to block obscene, harmful, or illegal content. UniFi’s built-in content filtering is not sufficient for CIPA compliance — deploy a dedicated DNS filtering solution (Cisco Umbrella, Securly, Lightspeed) as an overlay on the student SSID VLAN. UniFi handles network segmentation; filtering is a separate service layer.
• Separate SSIDs: Student devices (filtered VLAN), staff devices (filtered or unfiltered per policy), and IoT/classroom devices (AV equipment, printers) should be on separate VLANs with appropriate access policies.

Access control is the highest-priority physical security element of any UniFi deployment schools infrastructure — SB 11 requires single-point controlled entry with logged credential access.

4. Access Control & Visitor Management

Texas SB 11 requires single-point-of-entry with controlled access for K-12 campuses. UniFi Access implementation for schools:

• Main vestibule: All visitor entry through a controlled vestibule — Access Hub on the vestibule inner door, staff NFC credential for entry, visitor buzzer/intercom for office staff to remotely unlock. UniFi Intercom at the vestibule exterior provides video identification before door release.
• Staff entry points: NFC card or mobile credential at designated staff entry doors — all other exterior doors locked and alarmed (fire egress compliant, fail-safe).
• Server room / IT closet: Access reader with administrator credential — network infrastructure is a high-value target that requires physical access control.
• Visitor credentials: Day-pass credentials provisioned through the office workflow — UniFi Access supports time-limited credentials that expire automatically at end of school day.

VLAN segmentation in UniFi deployment schools isolates student devices, staff devices, cameras, and access control on separate network segments — critical for CIPA compliance and guest network isolation.

5. Network Segmentation for School Deployments (CIPA)

NVR storage sizing for UniFi deployment schools projects must meet Texas retention expectations — typically 30–60 days for general cameras and 90+ days for pharmacy or controlled substance areas.

6. NVR & Storage for School Campuses

Texas Education Code does not specify minimum camera retention periods, but most Texas districts target 30 days minimum, with 90 days for entry cameras. For a typical K-12 campus with 60 cameras at 2K on motion recording:

• 30-day retention: approximately 18 TB usable storage
• 90-day entry camera retention (10 cameras continuous): additional 10 TB
• Total: ~28 TB — the UNVR Pro (7-bay) with 7× 8 TB drives in RAID 5 (48 TB usable) handles this with growth headroom

For multi-building high school campuses, a single UNVR Pro or ENVR at the main building MDF typically centralizes all campus recording — cameras on remote buildings connect via fiber backbone to the central NVR.

Texas funding sources for UniFi deployment schools security projects include the School Safety Allotment (HB 3), Title IV-A federal funds, and E-Rate for eligible network infrastructure components.

Grant funding significantly reduces the cost barrier for UniFi deployment schools projects — the School Safety Allotment alone provides per-student funding specifically for this type of infrastructure.

7. Texas Grant Funding for School Security

Texas school districts have access to several funding sources for security infrastructure:

• Texas School Safety Allotment: Per-student allotment under HB 3 (2019) specifically for school safety expenditures including surveillance and access control infrastructure
• Title IV-A (Student Support and Academic Enrichment): Federal funds allowable for school safety technology under the Every Student Succeeds Act
• E-Rate Program: FCC program covers eligible network infrastructure including switches, APs, and cabling (not cameras or access control)
• ESSER Funds: COVID-relief education funds (largely expended) were used by many districts to accelerate security upgrades — verify remaining availability with your business office

See our school security planning guide for additional Texas funding references and implementation considerations for comprehensive campus security programs.

UniFi School Deployment — Texas Funding Sources Reference

These are the most common UniFi deployment schools mistakes that create CIPA violations, Texas compliance gaps, or security failures that become visible only after an incident.

8. Common School UniFi Deployment Mistakes

• One AP per wing for 1:1 programs: Classroom-density Wi-Fi requires one AP per room — attempting to cover multiple classrooms from a hallway AP results in poor performance for students at the far end of the room
• No dedicated vestibule camera: The vestibule is the highest-priority camera position on a school campus — visitor identification before door release requires a camera with sufficient resolution to support face recognition at the intercom
• Cameras pointing at restroom entries from corridors: Camera angle must be verified to ensure the corridor camera does not inadvertently capture the restroom interior — document camera angles in the as-built drawings
• Assuming UniFi content filtering is sufficient for CIPA: UniFi’s built-in DNS filtering is basic — CIPA compliance requires a dedicated education filtering platform. E-Rate funding covers eligible filtering services.
• No access control on IT/server room: The network infrastructure room is where all campus systems converge — physical access to switches means access to cameras, Wi-Fi, and student data network

These frequently asked questions address the most common planning decisions in UniFi deployment schools projects across Texas K-12 campuses.

Frequently Asked Questions